feat(flows): add the recommended-flow catalog

[kjgbot]

Summary

• add a versioned machine-readable recommended-flow catalog and list/detail endpoints
• publish Software Garden branding under canonical flow id software-factory
• reference the canonical AgentWorkforce/flows v2.0.22 source by immutable commit and SHA-256 without copying source
• gate CI and production deploy on release-tag resolution, bounded source fetch, and digest verification
• document the catalog and activation contract; reserve no Babysitter behavior

Verification

• npm run verify:recommended-flows (pass; v2.0.22 -> b4dd665eb433bd7f52d1045543aef5f14fb7891e, SHA-256 41c2137179455881a0fcf568006d2b41e24386ba1cf7dc2c6051871b6f744368)
• npm --workspace web test -- --run lib/test/recommended-flow-catalog.test.ts (5 passed)
• cd web && npx tsc --noEmit (pass)
• npm --workspace web test (212 passed, 1 unrelated timeout in flow-workflows.test.ts; the same test timed out when rerun alone)
• npm --workspace web run build reached Creating an optimized production build but did not complete on the shared machine and was cancelled

---

Note

Low Risk
Adds read-only static JSON APIs and CI network checks; no auth or existing runtime paths changed beyond new deploy/test gates.

Overview
Introduces a versioned recommended-flow catalog as checked-in JSON plus public list/detail APIs at /api/v1/flows/catalog, so Cloud and the CLI can share the same flow IDs, defaults, and immutable GitHub source pointers instead of duplicating metadata.

The first entry is Software Garden (software-factory), pointing at AgentWorkforce/flows release v2.0.22 by full commit SHA and SHA-256 digest—no inlined flow source. CI and production deploy now run npm run verify:recommended-flows, which resolves the release tag, fetches the pinned raw file (size-capped), and fails on digest or tag drift.

Docs add a Recommended flows page (catalog API, activation contract) and sidebar nav; tests cover catalog shape, HTTP caching/CORS, and 404s for non-canonical IDs.

^{Reviewed by Cursor Bugbot for commit 3baf940. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 01c7090c-db76-4a3c-92be-7980fcd9ff54

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Preview deployed!

Environment	URL
Web	https://41ff8111-agentrelay-web.agent-workforce.workers.dev

This is a Cloudflare Workers preview version of this PR's build.